summaryrefslogtreecommitdiffstats
path: root/node-admin
diff options
context:
space:
mode:
authorHarald Musum <musum@oath.com>2018-11-20 13:07:14 +0100
committerHarald Musum <musum@oath.com>2018-11-20 13:07:14 +0100
commit282a5bdd0d12484c75751da445dcd3df0e725dae (patch)
tree0ef8a04a8fcaece6a33cf58a41a0274bb4bffcc8 /node-admin
parenta549b3d81757eb3670982c936c1312a939003816 (diff)
Set CAP_SYS_NICE for Docker containers
Diffstat (limited to 'node-admin')
-rw-r--r--node-admin/src/main/java/com/yahoo/vespa/hosted/node/admin/docker/DockerOperationsImpl.java3
1 files changed, 2 insertions, 1 deletions
diff --git a/node-admin/src/main/java/com/yahoo/vespa/hosted/node/admin/docker/DockerOperationsImpl.java b/node-admin/src/main/java/com/yahoo/vespa/hosted/node/admin/docker/DockerOperationsImpl.java
index 26d162fd1a0..48ab63797c7 100644
--- a/node-admin/src/main/java/com/yahoo/vespa/hosted/node/admin/docker/DockerOperationsImpl.java
+++ b/node-admin/src/main/java/com/yahoo/vespa/hosted/node/admin/docker/DockerOperationsImpl.java
@@ -98,7 +98,8 @@ public class DockerOperationsImpl implements DockerOperations {
.withUlimit("nproc", 409_600, 409_600)
.withUlimit("core", -1, -1)
.withAddCapability("SYS_PTRACE") // Needed for gcore, pstack etc.
- .withAddCapability("SYS_ADMIN"); // Needed for perf
+ .withAddCapability("SYS_ADMIN") // Needed for perf
+ .withAddCapability("SYS_NICE"); // Needed for set_mempolicy to work
DockerNetworking networking = context.dockerNetworking();